25 grc analyst jobs at 18 companies in Silver Spring, MD
1w
Save
Mark Applied
Hide
1w
GRC Analyst – Rockville, MD
Rockville or Falls Church
OnsiteContract
Creative Information Technology: Provides IT solutions and software for government and healthcare sectors.
1+ YOE1 year information security/IT/GRC experience preferred; bachelor\u0002s degree in related field preferred; experience with ServiceNow and Office 365; knowledge of NIST, risk scoring, HIPAA; certifications earn points.
SkyePoint Decisions: Provider of cybersecurity, infrastructure, and IT development services.
5+ YOEBachelor's degree and 5+ years cybersecurity GRC experience supporting Federal programs; knowledge of NIST frameworks, FISMA, risk assessments, audit prep, U.S. citizenship and ability to obtain Public Trust required.
Information Security Governance, Risk & Compliance (GRC) Analyst
Rockville, Maryland, United States
OnsiteFull Time
ASSYST: An award-winning IT firm that delivers digital transformation, DevSecOps, cyber security, and AI integration for government agencies.
Experience in information security governance, risk management, or compliance; strong analytical, written and verbal communication, organizational skills; ability to learn new technologies and work independently.
ServiceNow Integrated Risk Management (IRM), Microsoft Office 365
Virtru: Provides data-centric encryption and privacy control software for organizations.
5+ YOE5+ years in information security/GRC or IT audit, deep knowledge of CMMC/NIST/FedRAMP/SOC2/PCI, cloud and GRC tool experience, strong communication and risk assessment skills.
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles, experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS), knowledge of NIST frameworks and federal security standards, HS diploma/GED, U.S. citizenship required.
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles; experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS); strong process/change management, policy-to-implementation translation, and knowledge of NIST RMF/FISMA/FedRAMP; U.S. citizenship required.
ServiceNow, Archer, RSA Archer, Xacta, Telos Xacta, eMASS, CSAM, API
Guidehouse: Provides management and technology consulting services to diverse organizations.
5+ YOEAbility to obtain Public Trust; 5+ years as a Business Analyst with 3+ years on ServiceNow; CSA certification; bachelor's degree in CS/IT/Business; strong requirements, SDLC/Agile experience, stakeholder facilitation, solution design, training, and mentoring.
Anduril Industries: Defense technology building autonomous military hardware and software.
5+ YOE5+ years cybersecurity GRC experience in enterprise environments; Bachelor\u0002s in CS/IT/Cybersecurity; hands-on CMMC, ISO 27001, NIST 800-53/171, GDPR experience; strong communication; eligible for US Secret Clearance and authorized to work in the US.
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
General Atomics Aeronautical Systems: Designs and manufactures unmanned aircraft and radar systems.
5+ YOEActive Top Secret/SCI clearance, US citizenship, bachelor\u0002s or equivalent, ~5+ years security experience, knowledge of CMMC/DFARS/NIST, RMF/IC directives, security assessments, and strong analytical and communication skills.
General Dynamics Information TechnologyNYSE: GD: Provides mission-critical IT services to government and defense organizations.
8+ YOEActive TS/SCI with polygraph, 8+ years related experience, US citizenship, DoW 8570 IAT I, experience with RMF/ATO activities, security audits, vulnerability assessment, and GRC tooling (Xacta).
Data Systems Analysts: Provides IT and cybersecurity solutions for government agencies.
8+ YOEBachelor's in IT or related +8 years IA experience (CISSP may substitute 2yrs), 3+ years leadership, Public Trust eligibility, NIST RMF and 800-53 expertise, GRC tool experience, strong analysis and communication skills.
Microsoft Copilot, Telos Xacta, CSAM, RSA Archer, eMASS
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yrHybridFull Time
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
K2United: Provides cybersecurity advisory and online workforce safety training.
4+ YOE4+ years RMF/continuous monitoring experience, POA&M and control assessment expertise, GRC platform experience, bachelor’s degree or equivalent, ability to meet federal background investigation.
CGINYSE: GIB: Provides information technology and business consulting services.
8+ YOE8 years financial management experience, bachelor\u0002s degree or equivalent, knowledge of SABRS/SMARTS and DAI modules, ability to reconcile transactions and resolve interface errors, audit background desired.
Defense Agencies Initiative (DAI), SABRS, SMARTS, Aquire 2 Retire (A2R), Budget to Report (B2R), Procure to Pay (P2P), Order to Cash (O2C), Cost Accounting (CA), Oracle Time and Labor (OTL), Oracle Business Intelligence Enterprise Edition (OBIEE), MCVISTA, GRC
Indianapolis or Dayton or Arlington or Salt Lake City or Louisville
$83k-$99k/yrOnsiteFull Time
AESNYSE: AES: Provides global power generation and sustainable energy solutions.
3+ YOEBachelor’s in engineering or related field; 3–7+ years in inverter-based resources; NERC standards knowledge; analytical and organizational skills; strong communication and cross-functional collaboration; preferred certifications.
Indianapolis or Dayton or Arlington or Salt Lake City or Louisville
$83k-$99k/yrOnsiteFull Time
AESNYSE: AES: Provides electricity and renewable energy solutions globally.
3+ YOEBachelor’s degree in engineering; 3–7+ years in inverter-based resources or renewable energy; NERC compliance experience; strong analytical, communication, and cross-functional skills.